Every new exploit,
on the radar.

nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.

Static config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture → heap overflow / inf…

An isolated Vagrant testbed designed to simulate a complete attack chain: Initial access via the Nginx heap buffer overflow (CVE-2026-42533) followed by root p…

Vulnerabilidad en NGINX

CVE-2026-42533: pre-auth nginx heap overflow and info leak from PCRE capture clobbering in the map/script engine, chained to RCE.

Defensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence.

Tracking the nginx CVE-2026-42533 map/regex capture-clobbering heap overflow

CVE-2026-42533 Nginx

Mass exploitation tool for CVE-2026-8206 – Unauthenticated Privilege Escalation via 'handle_forgot_password' in Kirki WordPress plugin (≤6.0.6).

A deep-dive technical reconstruction and impact analysis of CVE-2026-8206—a critical CVSS 9.8 unauthenticated account takeover vulnerability in the WordPress K…

CVE-2026-8206: Kirki Customizer Framework - Unauthenticated Account Takeover (CVSS 9.8)

CVE-2026-8206 Kirki Plugin Unauthenticated Account Takeover Exploit

An exploit for Apache Struts CVE-2017-5638

Struts2 S2-045（CVE-2017-5638）Exp with GUI

Demo Application and Exploit

S2-045 漏洞 POC-TOOLS CVE-2017-5638

Struts2 S2-045（CVE-2017-5638）Vulnerability environment - http://www.mottoin.com/97954.html

Example PoC Code for CVE-2017-5638 | Apache Struts Exploit

st2-046-poc CVE-2017-5638

These are just some script which you can use to detect and exploit the Apache Struts Vulnerability (CVE-2017-5638)

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)

CVE-2023-45866 - BluetoothDucky implementation (Using DuckyScript)

Exploits Tested in Mi A2 Lite and Realme 2 pro

BlueDucky exploits a Bluetooth vulnerability, specifically CVE-2023-45866, which allows an attacker to inject keystrokes into a target device. The attacker's d…

Rust implementation of Marc Newlin's keystroke injection proof of concept (CVE-2023-45866).

EDSEC_BKIF is a keystroke injection tool for Android, Linux, and iOS. With the help of CVE-2023-45866, it grants users unprecedented control over targeted syst…

Runtime exploit monitor for Apple document/image pipelines (iOS/macOS) — EXPMON concept: Frida agent + behavioral rules. First target: the CVE-2026-86950 glyph…

A python tool to detect PDF files exploiting CVE-2026-86950

Out-of-bounds Write (CWE-787)

CVE-2026-86950

CVE-2026-46333

CHARON — pre-built PoC for CVE-2026-46333 (Linux ptrace mm==NULL fd theft)

Research on `pidfd_getfd(2)`-based file descriptor leakage from privileged SUID processes. Demonstrates race-condition FD capture against OpenSSH `ssh-keysign`…

Use CVE-2026-46333 and CVE-2026-31431 to change any user's password.

CVE-2026-73570

Zimbra SNMP Notification OS Command Injection — Unauthenticated RCE via SMTP exploit (Poc)

PoC for CVE-2026-73570 (Zimbra SMTP Command Injection)

Detection-first, evidence-preserving incident-response toolkit for Zimbra CVE-2026-73570. Includes read-only host checks, IOC feeds, triage, persistence, conta…

CVE-2026-73570

CVE-2026-73570 PoC

Wazuh Rules for Detection Zimbra (CVE-2026-73570).

Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection (CVSS 8.9, CISA KEV)

Quick tool for utilizing CVE-2024-31317 on Android

CVE-2024-31317

A command-line utility to exploit Android Zygote injection (CVE-2024-31317)

Detailed discussion of Zygote vulnerability CVE-2024-31317

CVE-2024-31317 Debuggable App Exploit

CVE-2024-31317 Android Zygote命令注入漏洞研究与部署工具 | Android 9-13 漏洞利用框架

Remove Android profile owners/family link with CVE-2024-31317

Scanner for the Mini Shai-Hulud npm/PyPI supply chain worm (NHS CC-4781 · CVE-2026-45321). Detects gh-token-monitor persistence, payload artefacts, and attacke…

Shell script to detect TanStack npm supply chain attack indicators (CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx)

Detect CVE-2026-45321 Mini Shai-Hulud supply chain compromise — scans for 170 npm + 2 PyPI poisoned packages across TanStack, Mistral AI, UiPath, OpenSearch, G…

Claude Code skill to scan machines for Mini Shai-Hulud (CVE-2026-45321) supply chain worm IOCs

IOC checker for the TanStack/Mini Shai-Hulud npm supply chain attack (CVE-2026-45321)

Detects CVE-2026-45321 (TanStack supply chain compromise) and Mini Shai-Hulud worm artifacts. Scans node_modules, lockfiles, persistence hooks (Claude Code, VS…

Are you get Tanstack Supply chain attack attack of 5/11? CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx

🛡️ One-command scanner for CVE-2026-45321 — TanStack npm supply-chain attack

This Python PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0). It allows authenticated users to read sensitive s…

Exploit created using Python

Path Traversal vulnerability

Exploit for CVE-2024-46987

CVE-2024-46987 - Camaleon CMS LFI Exploit

This Rust PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0).

PoC exploit for CVE-2024-46987 — Camaleon CMS arbitrary path traversal (file read)

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)

Rust implementation of the Fusée Gelée exploit (CVE-2018-6242) for Tegra processors.

Payload injection tool for Nintendo Switch consoles vulnerable to CVE-2018-6242 ("Fusée Gelée")

An app that enables payload injection into a Switch console from an Android device by exploiting the CVE-2018-6242 vulnerability

Implementation of CVE-2018-6242 (AKA Fusée Gelée, AKA shofel2)

An implementation of the Fusee Gelee exploit (CVE-2018-6242) for the Nintendo Switch, along with a custom payload.

Metabase SQLi

CVE-2026-72898

CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection

PoC for CVE-2026-72898

CVE-2026-72898-Metabase-SQLi-Fix

CVE-2026-72898 - Metabase

Simple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)

Detector + root-cause analysis for CVE-2026-72898 (Metabase unauthenticated SQLi via reset_password)

CVE-2025-49144 PoC for security researchers to test and try.

PoC CVE-2025-49144

Proof of Concept (PoC) that exploits the CVE-2025-49144 vulnerability in the Notepad++ 8.8.1 installer.

CVE-2025-49144 * Notepad++ v8.8.1 * SYSTEM-level POC

Educational PoC for CVE-2025-49144 (regsvr32 LOLBIN) — authorized lab use only

This is my reproduce PoC for CVE-2025-49144

Clawdbot/Moltbot/OpenClaw One-click RCE PoC 🦞 (CVE-2026-25253)

Proactive security monitoring for OpenClaw deployments. Detects ClawHavoc, AMOS stealer, CVE-2026-25253, memory poisoning, and supply chain attacks.

> OpenClaw security audit and hardened deployment guide — known vulnerabilities (CVE-2026-25253, malicious skills, credential leakage), architectural mitigatio…

OpenClaw Authentication Token Exfiltration

CVE-2026-25253: One-Click RCE in OpenClaw via Auth Token Theft

Open-source sandboxed runtime for AI agents — gVisor/Docker isolation, credential vault, immutable audit log. Built after CVE-2026-25253.

PoC for CVE-2025-60787 - Authenticated RCE in motionEye for all versions up to 0.43.1b4 (included)

Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through …

CVE-2025-60787 Poc - RCE - MotionEye <= 0.43.1b4

Python PoC for CVE-2025-60787, authenticated OS command injection RCE in motionEye <= 0.43.1b4 via unsanitized image_file_name config

MotionEye v0.43.1b4 OS Command Injection

CVE-2025-60787 motionEye authenticated command injection RCE PoC

Automated exploit script for CVE-2026-27944 (Nginx UI). Downloads/decrypts backups, extracts system secrets, and creates rogue admin accounts for full dashboar…

CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector

An educational deep-dive into CVE-2026-27944

HTB Snapped — Hard Linux machine writeup. CVE-2026-27944 (Nginx UI unauthenticated backup disclosure) chained with CVE-2026-3888 (snapd race condition LPE) to …

Suka suka lah

Nginx UI - Backups Decryption (CVE-2026-27944)

Authenticated time-based blind SQL injection PoC for ZoneMinder CVE-2024-51482 (v1.37.* <= 1.37.64)

ZenoMinder Blind SQL Injection PoC

Time-based SQL injection PoC for CVE-2024-51482 in ZoneMinder, with reproducible Docker lab and automated data extraction.

CVE-2024-51482 ZoneMinder v1.37.* <= 1.37.64 poc

ZoneMinder Time-Based SQL Injection (CVE-2024-51482) Exploit POC

Scripts en Python para la explotación de CVE-2024-51482 (SQLi en ZoneMinder) — HTB CCTV

Performing multiple time-based blind injections for the same character and selecting the most frequent result significantly reduces errors and improves reliabi…

CVE-2025-51482 POC, Dump Credentials From zm.Users

Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Driver) TTPs for Ring 0 pro…

The PoC for CVE-2025-70795 / CVE-2026-0828 and updated driver

Kernel Process Termination Tool ( CVE-2026-0828 exploit)

BYOVD research performed by KOSEC. Includes vulnerable drivers and writeups (CVE-2026-0828).

Ring0-level process killer leveraging CVE-2026-0828 (BYOVD). Designed to demonstrate kernel-level process termination via a vulnerable signed driver, highlight…

CVE-2026-0828

Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Driver) TTPs for Ring 0 pro…

ThrottleStop.sys Arbitrary Physical Memory R/W

CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver

Arbitrary physical memory read/write exploitation using ThrottleStop.sys (CVE-2025-7771) with superfetch address translation - Windows kernel security research

Escalating privilege in the system from unsigned driver using throttlestop vulnerability

Arbitrary Function Call Exploit using the ThrottleStop driver

CVE-2025-7771 ThrottleStop.sys privilege escalation exploit - unrestricted IOCTL access to physical memory via MmMapIoSpace

A simple PoC demonstrating the vulnerability in the ThrottleStop.sys driver, showcasing arbitrary physical memory read and write capabilities, as well as virtu…

FortiSandbox RCE Scanner — CVE-2026-39808

PoC for Unauthenticated RCE in FortiSandbox via CVE-2026-39808

CVE-2026-39808

An unauthenticated OS command injection vulnerability

CVE-2026-39808 - Fortinet Sandbox - Draft

Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint

CVE-2026-4480

smb spooler to RCE

Exploit para CVE-2026-4480: inyeccion de comandos en la variable %J del print command de Samba para RCE sin autenticacion via spoolss.

Exploit CVE-2026-4480

This is an exploit poc for CVE-2026-4480

🔴 HackTheBox Abducted (Medium) — CVE-2026-4480 (Samba %J) → rclone reveal → SMB-Symlink → systemd Drop-in → Root

🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep Dive Analysis & Audit Module).

windows api bug

Attack surface in the real-world environment of CVE-2026-41096

In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Include…

CVE-2026-41096: Heap Overflow in the Windows DNS Client

Fuzzing the Microsoft Windows DNS client library. Inspired by CVE-2026-41096.

CVE 2021-21315 PoC

rust noob tried write easy exploit code with rust lang

systeminformation

Thesis scenario test (research only): Scenario D: KEV override path - [email protected] CVE-2021-21315

Exploit de reverseshell para desserialização em NodeJs (CVE-2017-5941)

Ejecución de exploit de deserialización con CVE-2017-5941

Exploit Title: Node.JS - 'node-serialize' Remote Code Execution (2), Version: 0.0.4, CVE: CVE-2017-5941

Thesis scenario test (research only): Scenario C: EPSS-BLOCK path - [email protected] CVE-2017-5941

A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability (CVE-2024-55591) in cert…

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy may allow a remote attacker to gain super-…

Educational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and und…